https://polyed.re/ A personal techy blog. Infra, scheme, weird workflows. en Sat, 27 Jun 2026 00:00:00 +0000 https://polyed.re/posts/search-edit-yaml-with-ym/ https://polyed.re/posts/search-edit-yaml-with-ym/ Sat, 27 Jun 2026 00:00:00 +0000 In my last article about languages in YAML costumes, I complained that Helm templatized YAML with a text templating engine. YAML is a language that serializes data structure into text. It would be better to manage directly the data structure that YAML represents. https://polyed.re/posts/languages-in-yaml-costumes/ https://polyed.re/posts/languages-in-yaml-costumes/ Sun, 07 Jun 2026 00:00:00 +0000 A few years ago, as I started my DevOps/infrastructure engineering journey, I had to learn all the tooling available in the ecosystem. At first, I felt joy writing Helm Charts, Terraform modules, Ansible playbooks. But as time went on, I found myself being more and more frustrated with minor annoyances in these tools. https://polyed.re/posts/benchmarking-tramp-backends/ https://polyed.re/posts/benchmarking-tramp-backends/ Sun, 29 Mar 2026 00:00:00 +0000 Every few months, someone posts about how painfully slow TRAMP is. And honestly, they're not wrong (opening a remote file and waiting for that modeline to stop spinning is one of those small frustrations that add up). https://polyed.re/posts/manage-guix-VM-in-openstack/ https://polyed.re/posts/manage-guix-VM-in-openstack/ Wed, 21 May 2025 00:00:00 +0000 It's been a few months since I started using Guix as the operating system on my personal laptop, and I've been continuously impressed by its unique approach to system management. Unlike traditional package managers, Guix offers a fully declarative, functional approach to system configuration. This means that your entire system—from packages to services to system parameters—can be defined in code and reproducibly deployed. https://polyed.re/posts/why-2767-nodeports/ https://polyed.re/posts/why-2767-nodeports/ Wed, 25 Sep 2024 00:00:00 +0000 In Kubernetes, NodePort allows external traffic to access services via a specific port range, typically 30000-32767. But while starting at port 30000 makes sense because Kubernetes does not want to conflict with other ports of the host, I wondered why Kubernetes supports only 2767 NodePorts by default. https://polyed.re/posts/guix-helm-charts/ https://polyed.re/posts/guix-helm-charts/ Mon, 01 Apr 2024 00:00:00 +0000 My daily job requires me to maintain multiple Helm Charts released to multiple Kubernetes Clusters. https://polyed.re/posts/filter-metrics/ https://polyed.re/posts/filter-metrics/ Thu, 19 Oct 2023 00:00:00 +0000 This post discusses about the limit of Prometheus crawlers when a software exposes too much metrics, and provides a solution to limit the number of metrics exported by Softwares that cannot be modified. https://polyed.re/posts/ktx/ https://polyed.re/posts/ktx/ Sat, 15 Jul 2023 00:00:00 +0000 Kubernetes clusters rarely come alone. If you have access to at least one, in no time you'll need to switch your kubectl context to access other clusters. https://polyed.re/posts/scaling-kube-state-metrics/ https://polyed.re/posts/scaling-kube-state-metrics/ Wed, 31 May 2023 00:00:00 +0000 Kube State Metrics is a service that listen to the Kubernetes API server and generates metrics about the state of the resources (Pods, Deployments, Namespaces...). The metrics are exported on the HTTP endpoint /metrics on the listening port (default 8080). They are served as plaintext and can be crawled directly by Prometheus. https://polyed.re/posts/dive/ https://polyed.re/posts/dive/ Sat, 10 Dec 2022 00:00:00 +0000 One of the challenges of using Docker is that images can often be quite large, especially for interpreted languages. Large Docker images increase pull time and disk space usage, making it difficult to manage and deploy applications. In this article, we'll take a look at a tool called "dive" that can help to optimize the size of Docker images. https://polyed.re/posts/openpgp_2/ https://polyed.re/posts/openpgp_2/ Fri, 29 Apr 2022 00:00:00 +0000 Dans la partie précédente, j'ai créé une paire de clé GPG primaire sur un trousseau temporaire, puis 3 clés secondaires pour chaque usage : signer, chiffrer et authentifier. Je peux maintenant sauvegarder la clé primaire sur un support physique déconnecté d'internet et transférer les clés secondaires sur le trousseau système. https://polyed.re/posts/openpgp_1/ https://polyed.re/posts/openpgp_1/ Tue, 29 Mar 2022 00:00:00 +0000 Les outils pour créer des clés GPG existent depuis une vingtaine d'années maintenant, et pourtant la gestion des clés est toujours aussi rugueuse. Dans cet article je vais essayer de résumer tout ce que j'ai compris et mis en place pour respecter les Best Practices. https://polyed.re/posts/microk8s/ https://polyed.re/posts/microk8s/ Sat, 12 Feb 2022 00:00:00 +0000 Microk8s is a framework designed to start a Kubernetes cluster. According to Canonical, which maintain the project, it is production ready, requires low maintenance and the Kubernetes cluster uses minimal resources.